SSL Client problems

2002-07-17 Thread Mestl, Robert R.
Hello, I have a question or two about some problems we are having with the client program. Let me explain the setup of my program. This is a program used as a host-interface between our company and another company, and is written to be a-synchronous. The main (parent) process sets up a single

Re: Re: Openssl

2002-07-17 Thread Shalu
hi I have just bought the oreilly book network security with openssl I am the first person to buy that book in Paris its a great book (seems) I have also to do a project, now the internship is over and i did a good amount of work next i ll work independenltly with the book inIndia Its a great boo

Borland C++ Builder 5...

2002-07-17 Thread Thomas J. Hruska
Just for reference and archive purposes, libssl32.lib and libeay32.lib can be extracted from pre-built VC++ DLL's by using the following commands from the command-line: implib -a libssl32.lib libssl32.dll implib -a libeay32.lib libeay32.dll It took me a while to figure out that the OpenSSL build

OpenSSL Book....

2002-07-17 Thread Derek Heidorn
For those who don't already know this, there's a book on OpenSSL published by O'Reilly. Details: Network Security with OpenSSL Authors: John Viega, Matt Messier and Pravir Chandra Publisher: O'Reilly ISBN: 0-596-00270-X Cheers, Derek --  __ Derek Heido

Re: Openssl

2002-07-17 Thread Rich Salz
> I want to separate the OpenSSL project in two parts (Client and Server), There is a high-level API that can be separated this way: SSL_accept, and SSL_connect. But is SSL_read a client or a server function? It's both. And, in fact, most of the openssl source code is used in both client a

Crypt::SSLeay ver 0.37.0 or later

2002-07-17 Thread Greulich, Jeanne M.
Title: Crypt::SSLeay ver 0.37.0 or later Hello, I am looking for a compiled version of the Crypt:SSLeay module for Windows 2000 that is version0.37 or later.  I have found that Active State has a version 0.17.0 but it does not have features I need.  Is anyone aware of one?  Thank You

Re: Openssl

2002-07-17 Thread julien crespin
Hello, I've already bought the book of Eric Rescorla "SSL and TLS", but it did not help me much. I want to separate the OpenSSL project in two parts (Client and Server), are you sure "Network Security with OpenSSL" (by John Viega, Matt Messier, Pravir Chandra) deals with ? I thought when you

Re: ans1 0D09F007 and 0D091007 error with verisign cert.

2002-07-17 Thread Christian Hohnstaedt
On Wed, Jul 17, 2002 at 09:15:22AM +0200, Axel Keul wrote: > Dear all, > > Using Apache/modssl/openssl SSL worked fine with test certs. But when I try to add a >verisign cert I get the following error and the startup failes. > > -- mod_ssl: Init: Unable to read server certificate from file >/o

Re: Re:an advise

2002-07-17 Thread Geoff Thorpe
Agreeing with Lutz's points, but querying a particular item ... On Wed, 17 Jul 2002, Lutz Jaenicke wrote: > * An AMD K6/500MHz will do approx 30 1024bit private RSAs per second. um, perhaps if you configure "no-asm -ggdb3"?? Otherwise I can only assume you're getting 30 ops/sec because someone

arbitrary DH keys for ADH-DES-CBC3-SHA

2002-07-17 Thread Michael Schmidt
Hi, For a research project I'm pursuing, I want to use OpenSSL with ADH-DES-CBC3-SHA (TLSv1). This means I want to use neither a server-side nor a client-side certificate; and the pre-master secret shall be established via Diffie-Hellman key exchange. From my experience so far, the current i

shatest.c - SHA_Update()

2002-07-17 Thread Srinivas Cheruku
Hi all, I am looking into the shatest.c file since i want to make use of sha-1 message digest. In this file openssl-0.9.6d/crypto/sha/shatest.c, 141 for (i=0; i<1000; i++) 142 SHA_Update(&c,buf,1000); 143 SHA_Final(md,&c); For chunks of data we can call

RE: Anyone using OpenSSL for a CA or PKI Deployment?

2002-07-17 Thread Marco \"Kiko\" Carnut
Justin, We are working on a project to make a free PKI that issues certificates for free in two main forms: * without identity guarantees. It's what we call "entry-level" certificates. Because of this, it can be issued instantly, without the need for manual approval. It's meant for learning

Re: an advise

2002-07-17 Thread Paul Kocher
Timing attacks are primarily an implementation issue, rather than a protocol issue. The SSL 3.0 spec doesn't try to describe all the things that implementations need to do in order to be secure, as this would have been far too complex and implementation-specific to include. Having said this, I

ans1 0D09F007 and 0D091007 error with verisign cert.

2002-07-17 Thread Axel Keul
Dear all, Using Apache/modssl/openssl SSL worked fine with test certs. But when I try to add a verisign cert I get the following error and the startup failes. -- mod_ssl: Init: Unable to read server certificate from file /opt/apache/conf/ssl.crt/server.crt (OpenSSL library error follows) -- Op

Re: Anyone using OpenSSL for a CA or PKI Deployment?

2002-07-17 Thread Dawn Whiteside
We're running a CA (just host certificates right now, about 80 of 'em by my count) at the University of Waterloo using OpenSSL and a handful of simple scripts and cron jobs to deal with the three common situations: handling properly formatted requests, generating both certificate and key for othe

Re: Re:an advise

2002-07-17 Thread Lutz Jaenicke
On Tue, Jul 16, 2002 at 10:03:22PM -, Shalu wrote: > Yeh u are right this was a problem for Pubic Key crypto systems > but even in the implementation of these SSL or TLS first a master > secret is set up with the help of > pre master secret, which is done through the Public Key > Cryptograp